Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4916999b-0e04-342f-9c7d-ffdebf15b80b.roa
File:                     4916999b-0e04-342f-9c7d-ffdebf15b80b.roa (raw, json)
Hash identifier:          PZHXGmBIbbc/uPMgVuPvSaOjA32XknDrUbGduQbBzeI=
Subject key identifier:   B9:67:0E:03:7C:1E:54:81:21:49:B6:43:B5:FF:BB:C1:A2:E6:A8:0E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2B919CA9ABE5C2D856675380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4916999b-0e04-342f-9c7d-ffdebf15b80b.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     396573
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:9c:a9:ab:e5:c2:d8:56:67:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=fc8c8521-52d2-46b1-aa81-d7a19272a3f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3c:95:aa:a6:b2:32:cc:da:46:d4:2e:42:a7:
                    04:c7:1d:2b:c0:64:e4:6f:80:7e:44:fb:ac:a2:1e:
                    a7:47:78:d4:79:f6:93:d6:ef:ec:0b:f2:e1:76:d8:
                    2e:7e:28:28:9b:72:98:4d:ae:24:30:2e:9f:d8:b4:
                    48:cc:45:77:76:6e:65:f5:f3:7e:03:01:a7:e0:5f:
                    e8:08:d0:2e:d2:b2:94:ec:6a:fd:69:2e:3d:20:2d:
                    d4:a0:66:e5:35:4d:7f:96:42:58:24:2b:ef:8b:68:
                    43:43:e1:35:2d:5f:70:44:58:9f:4f:16:10:70:10:
                    0f:73:16:50:9c:30:f7:36:9c:67:5c:99:9a:44:7a:
                    d5:4e:1a:3e:bc:86:2b:75:b7:6e:a5:46:73:fa:ea:
                    65:e0:8b:07:59:6b:6b:5b:39:02:2b:89:cd:be:75:
                    f8:bd:2a:80:0a:67:6e:70:bf:fb:eb:66:b7:bf:2b:
                    6e:f4:70:ea:a3:4d:63:da:54:44:4b:fd:2e:19:aa:
                    50:b9:8f:35:e2:65:a2:cd:73:9f:35:59:88:a5:f7:
                    c4:f9:af:83:d1:b5:2f:79:95:a8:53:d9:78:c0:ab:
                    65:85:cc:50:85:4c:10:62:98:fd:18:28:3e:9c:38:
                    79:d0:9b:46:42:14:4a:2f:f4:85:3c:0f:55:35:00:
                    a9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:67:0E:03:7C:1E:54:81:21:49:B6:43:B5:FF:BB:C1:A2:E6:A8:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4916999b-0e04-342f-9c7d-ffdebf15b80b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:56:7a:2e:1a:03:40:9a:ce:17:f8:bf:54:01:87:c1:23:dd:
         d1:c9:ac:c8:66:1d:89:c1:28:7c:ef:0f:4e:87:f6:fd:19:ed:
         fc:52:36:70:a0:b1:64:c5:e3:76:61:78:a1:d9:28:a2:d5:b2:
         c2:87:96:fe:9b:29:75:5c:01:43:9a:f0:eb:59:7b:2e:9f:ad:
         5f:11:ba:56:8c:eb:3e:03:83:b1:cb:4a:84:57:23:af:3f:89:
         c8:f9:f6:ee:79:35:0b:34:ed:39:c3:ac:df:34:cf:1f:ab:59:
         ed:0c:93:c7:0a:b6:cc:11:62:79:39:e5:84:58:4b:d1:31:8e:
         17:5a:33:98:69:4a:d1:79:3a:bb:9e:b7:29:9b:bf:79:20:34:
         f9:63:80:80:56:3b:ee:0e:a9:83:2a:9c:ce:99:01:45:43:07:
         03:4f:c2:02:dc:cd:21:df:c5:52:e7:31:db:24:a3:85:03:9f:
         63:07:8c:5e:dd:c0:ab:66:d1:06:cf:9b:75:45:a0:8d:1f:6f:
         ed:b2:f5:02:aa:42:71:15:60:03:e4:67:d3:f3:01:70:55:b7:
         8a:60:1a:96:c7:08:40:4d:f2:0a:2d:d0:f7:9b:f8:b8:46:42:
         70:c4:6a:22:78:8e:2f:74:0f:34:c5:d0:12:b3:ee:74:8a:68:
         c2:75:1f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:54:27 2025 by rpki-client